[NEW] [UNPATCHED] [medium] Red Hat Quay: Vulnerability allows bypassing of security measures
A remote, authenticated attacker can exploit a vulnerability in Red Hat Quay to bypass security measures.
Advisories tracked
20,853
● Live advisory feed
Security Advisory Fusion for CSIRTs, SOCs & Defenders
Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.
Known exploited
1,782
Sources online
24
Last sync
5H AGO
USN-8605-1: Linux kernel (Azure CVM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP (FOU); - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptogra…
USN-8604-1: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP (FOU); - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptogra…
USN-8603-1: Linux kernel (Azure) vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not prope…
[NEW] [medium] Znuny: Multiple vulnerabilities allow information disclosure
A remote, anonymous or authenticated attacker can exploit multiple vulnerabilities in Znuny to disclose information.
[NEW] [medium] QT: Vulnerability allows file manipulation
A remote, anonymous attacker can exploit a vulnerability in QT to manipulate files.
[NEW] [medium] gdk-pixbuf: Vulnerability allows information disclosure
A remote, anonymous attacker can exploit a vulnerability in gdk-pixbuf to disclose information.
[NEW] [medium] PyTorch: Vulnerability allows denial of service and information disclosure
A remote, anonymous attacker can exploit a vulnerability in PyTorch to conduct a denial of service attack and disclose information.
[NEW] [high] JetBrains PyCharm: Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in JetBrains PyCharm to execute arbitrary program code.
[UPDATE] [low] BusyBox: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in BusyBox to conduct a denial of service attack and manipulate files.
[UPDATE] [medium] Apache Tomcat Connectors: Vulnerability allows denial of service
A local attacker can exploit a vulnerability in Apache Tomcat Connectors to conduct a denial of service attack.
[UPDATE] [medium] libxml2: Vulnerability allows information disclosure
A remote, anonymous attacker can exploit a vulnerability in libxml2 to disclose information.
[UPDATE] [medium] Apache HTTP Server: Multiple vulnerabilities allow denial of service
A remote, anonymous attacker can exploit multiple vulnerabilities in Apache HTTP Server to conduct a denial of service attack.
[UPDATE] [medium] Apache Tomcat mod_jk Connector: Vulnerability allows bypassing security measures or disclosing information
A remote anonymous attacker can exploit a vulnerability in Apache Tomcat mod_jk Connector to bypass security measures or disclose confidential information.
[UPDATE] [high] Apache HTTP Server: Multiple vulnerabilities allow HTTP response splitting
A remote, anonymous attacker can exploit multiple vulnerabilities in Apache HTTP Server to conduct a response splitting attack.
[UPDATE] [medium] Apache Commons Beanutils: Vulnerability allows bypassing security precautions
A remote, anonymous attacker can exploit a vulnerability in Apache Commons Beanutils to bypass security precautions.
[NEW] [critical] WordPress: Multiple vulnerabilities allow code execution
A remote, anonymous attacker can exploit multiple vulnerabilities in WordPress to execute arbitrary program code.
[NEW] [medium] Bitdefender Internet and Total Security: Vulnerability allows privilege escalation
A local attacker can exploit a vulnerability in Bitdefender Internet Security and Bitdefender Total Security to escalate privileges.
[NEW] [medium] wget: Vulnerability allows bypassing of security measures
A local attacker can exploit a vulnerability in wget to bypass security measures and conduct a server-side request forgery attack.
[NEW] [medium] Red Hat Enterprise Linux (libinput): Vulnerability Allows Privilege Escalation
A local attacker can exploit a vulnerability in Red Hat Enterprise Linux (libinput) to escalate their privileges.
[UPDATE] [high] Bouncy Castle BC-JAVA: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Bouncy Castle BC-JAVA to bypass cryptographic security measures, disclose confidential information, or cause a denial-of-service condition.
[UPDATE] [medium] Apache ActiveMQ: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Apache ActiveMQ to conduct a denial of service attack or cause unspecified impacts.
[UPDATE] [high] Apache Kafka: Vulnerability allows information disclosure
A remote, anonymous attacker can exploit a vulnerability in Apache Kafka to disclose information.
Multiple Vulnerabilities in Internet-Facing Systems Targeting Hong Kong’s Education Sector
[UPDATE] [high] Apache ActiveMQ, Client, Broker and Web: Multiple vulnerabilities
A remote, authenticated attacker can exploit multiple vulnerabilities in Apache ActiveMQ to manipulate files or execute arbitrary code.
[UPDATE] [high] Squid: Multiple vulnerabilities allow denial of service
A remote, anonymous attacker can exploit multiple vulnerabilities in Squid to conduct a denial of service attack.
[UPDATE] [high] NGINX and NGINX Plus: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in NGINX Plus and NGINX to conduct a denial of service attack, manipulate data, bypass security measures, and potentially execute arbitrary program code.
[UPDATE] [medium] Squid: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Squid to disclose information and conduct an unspecified attack.
[UPDATE] [low] libexpat: Multiple vulnerabilities allow denial of service
A local attacker can exploit multiple vulnerabilities in libexpat to conduct a denial of service attack.
[UPDATE] [high] Red Hat Build of Debezium for Red Hat Application Foundations: Multiple vulnerabilities allow code execution
An attacker can exploit multiple vulnerabilities in Red Hat Build of Debezium for Red Hat Application Foundations to execute arbitrary program code.
[UPDATE] [high] Apache ActiveMQ/Artemis: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Apache ActiveMQ/Artemis to conduct an unspecified attack and bypass security precautions.
[UPDATE] [high] PostgreSQL: Multiple vulnerabilities
A remote, authenticated or anonymous attacker can exploit multiple vulnerabilities in PostgreSQL to disclose information, execute arbitrary code, and conduct unspecified attacks, potentially leading to privilege escalation.
[UPDATE] [high] IBM WebSphere Application Server: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM WebSphere Application Server to bypass security measures and execute code.
[UPDATE] [high] WebKitGTK: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in WebKitGTK to conduct a denial of service attack, disclose information, and bypass security precautions.
[UPDATE] [medium] Red Hat OpenShift and OpenShift AI (urllib3): Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in Red Hat OpenShift and OpenShift AI to conduct a denial of service attack.
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in the Linux Kernel to perform unspecified attacks that may lead to a denial-of-service condition or cause memory corruption.
[UPDATE] [high] NGINX Open Source and NGINX Plus: Vulnerability allows denial of service and potentially code execution
A remote, anonymous attacker can exploit a vulnerability in NGINX and NGINX Plus to conduct a denial of service attack and potentially execute arbitrary code.
[UPDATE] [medium] Red Hat Enterprise Linux (Quarkus): Multiple vulnerabilities
A remote, authenticated or anonymous attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to conduct a cross-site scripting attack, cause a denial-of-service condition, or disclose confidential information.
[UPDATE] [medium] docker: Multiple Vulnerabilities
A local attacker can exploit multiple vulnerabilities in docker to execute arbitrary code with administrative privileges, cause a denial-of-service condition, or manipulate data.
[UPDATE] [high] Apache HTTP Server: Multiple Vulnerabilities
An attacker can exploit multiple vulnerabilities in Apache HTTP Server to execute arbitrary code, disclose information, and bypass security measures.
[UPDATE] [medium] Linux Kernel: Vulnerability Allows Bypassing Security Measures
A local attacker can exploit a vulnerability in the Linux Kernel to bypass security measures and disclose confidential information, enabling further attacks.
[UPDATE] [high] VMware Cloud Foundation, vSphere, Aria Operations and Tools: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in VMware Cloud Foundation, VMware vSphere, VMware Aria Operations, and VMware Tools to gain elevated privileges – even administrative rights – and disclose confidential information.
[UPDATE] [high] Apache Commons BeanUtils: Vulnerability allows bypassing security measures
A remote, authenticated attacker can exploit a vulnerability in Apache Commons BeanUtils to bypass security measures.
[NEW] [high] rsyslog: Vulnerability allows Denial of Service and potentially code execution
A remote, anonymous attacker can exploit a vulnerability in rsyslog to conduct a Denial of Service attack and potentially execute arbitrary program code.
[UPDATE] [medium] Red Hat JBoss Enterprise Application Platform (bouncycastle): Vulnerability allows information disclosure
A remote, anonymous attacker can exploit a vulnerability in Red Hat JBoss Enterprise Application Platform to disclose information.
[UPDATE] [high] OpenCTI: Vulnerability allows obtaining administrator rights
A remote, anonymous attacker can exploit a vulnerability in OpenCTI to gain administrator rights.
MongoDB Multiple Vulnerabilities
Google Chrome Multiple Vulnerabilities
SEIKO EPSON printers and scanners Web Config vulnerable to cross-site request forgery
Web Config embedded in SEIKO EPSON multiple printers and scanners contains a cross-site request forgery vulnerability.